%{
    boolean allowUnspecified = _allowUnspecified != null && _allowUnspecified;
    boolean allowAccess = controllers.deadbolt.Deadbolt.checkRestrictedResource(_resourceKeys, _resourceParameters, allowUnspecified)
}%
#{if allowAccess}
    #{doBody /}
#{/if}